Skip to applications
SWISO Platform Hub
Sign in with Microsoft

Compliance | Assurance | Progress

Welcome to the SWISO Platform

Explore our secure compliance and business applications.

Approved Microsoft Entra accounts only

Application access is provided only to authorised organisations and users.

Applications

Products available to your organisation

No customer or account information is displayed until secure sign-in is completed.

MICROSOFT ENTRA · ACCOUNT SECURITY

Set up Microsoft Authenticator

Use these steps if your organisation requires multi-factor authentication before you can open the SWISO Platform.

Install the app

Install Microsoft Authenticator from the Apple App Store or Google Play on the phone you will use to approve sign-ins.

Open Security info

On a computer, open Microsoft Security info, sign in with your work or school account, then choose Add sign-in method and Microsoft Authenticator.

Scan the QR code

In Authenticator, select +, Work or school account, then Scan QR code. Scan the code shown on the computer.

Approve the test

Select Next on the computer and approve the test notification. Enter the displayed number when Microsoft asks for number matching.

Open SWISO

Return to the SWISO Hub and sign in with the same authorised work or school account.

Common sign-in problems

I am not receiving a notification

Open Authenticator directly, confirm notifications are enabled, turn off Do Not Disturb, check the phone has internet access and automatic date and time, then try again. On Android, also check Google Play Services and battery optimisation.

The QR code will not scan

Allow Authenticator to use the camera, increase the computer screen brightness and scan the whole square. If scanning still fails, choose the manual code option shown by Microsoft.

The code or approval has expired

Make the phone's date and time automatic, request a fresh sign-in and use the newest prompt. Do not reuse an older notification.

I selected the wrong Microsoft account

Sign out and select the authorised work or school account. A personal Microsoft account or an unassigned work account cannot open a licensed SWISO workspace.

I changed or lost my phone

Use another sign-in method already registered, if available, then update Microsoft Security info. If you cannot sign in, contact your organisation's Microsoft Entra administrator so the old method can be removed securely.

Microsoft accepted me, but SWISO says access is not approved

MFA proves the Microsoft identity; it does not grant a SWISO licence. Contact your SWISO Platform Administrator to confirm that your email address, account status, products and standards have been assigned.

I still cannot sign in

Try a private browser window, temporarily disconnect a VPN, confirm the device and Authenticator app are current, then use Microsoft's troubleshooting guide. Your administrator may need to review a Conditional Access or registration policy.
SWISO PLATFORM ASSURANCE

Security designed into every layer

A controlled, identity-first platform architecture protects client access, separates organisations and keeps permissions under accountable administrative control.

MICROSOFT ENTRA PROTECTED
CONFIDENTIAL BY DESIGN

Secure access without a second SWISO password

Microsoft Entra ID authenticates the user. SWISO then independently checks the approved account, organisation, active licence, role, product, feature and applicable standards before returning protected workspace information.

01

Identity and MFA

Microsoft Entra ID, work-account verification and organisation MFA policies provide the sign-in boundary. Unknown or inactive accounts fail closed.

02

Tenant isolation

Every protected request is tied to an active organisation membership. Client workspaces and records are separated by server-side tenant controls.

03

Least-privilege access

Roles, products, features, standards, start dates and expiry dates are evaluated by the API—not trusted to browser menus or hidden buttons.

04

Encrypted web security

HTTPS, HSTS, content-security policy, secure headers and controlled gateway routing reduce interception, unsafe embedding and unauthorised access.

05

Traceable governance

Controlled design and administration changes are validated, versioned and entered in the audit trail with the responsible authenticated identity.

06

Backup and recovery

Database backups, health-gated releases and automatic rollback protect continuity. A failed candidate cannot silently replace the last verified release.

DATA CONTROL

Sovereignty-conscious architecture

Operational data is kept within the contracted SWISO hosting and approved Microsoft 365 boundaries. Microsoft services are used for identity and explicitly configured integrations; workspace data is not made public by the Hub.

What the public Hub never doesIt does not expose customer records, grant licences, bypass MFA, infer permissions from visible cards or accept a browser-only claim as authority.